1. Data controller
FretCom is the controller of the personal data collected through the Platform. For any request about the protection of your data, contact: info@fretcom.ch
FretCom complies with the Swiss Federal Act on Data Protection (revised FADP, in force since 1 September 2023) and, for processing concerning people located in the European Union, with Regulation (EU) 2016/679 (GDPR).
2. Data collected
2.1 Identification and account data
- Surname, first name, job title, business email address
- Company name, business identification number (UID/SIRET/VAT)
- Business telephone number
- Billing address
- Connection data (logs, IP address, browser, timestamp)
2.2 Operational data
- Published transport shipments (type, volume, route, constraints)
- Transport documents generated or uploaded (CMR, delivery notes, customs documents)
- GPS data for vehicles linked to shipments (positions, speeds, stops)
- History of transactions and contractual exchanges
- Ratings and reviews between Users
2.3 Technical and browsing data
- Technical cookies needed for the Platform to work
- Analytics cookies (audience measurement, performance), with consent
- Platform usage data (features used, frequency, duration)
FretCom does not collect sensitive data (health, political opinions, religious beliefs). Card data is processed directly by our PCI DSS certified payment provider. FretCom does not store any payment data.
3. Purposes of processing
Your data is processed for the following purposes:
- Performance of the contract: managing your account, providing the services, invoicing, technical support.
- Security: authentication, fraud prevention, data integrity.
- Service improvement: usage analysis (aggregated and anonymised data), development of new features.
- Legal compliance: archiving of transport documents, customs declarations, tax obligations.
- Commercial communication: information about updates, new features and offers, with the option to unsubscribe at any time.
4. Legal bases for processing
- Performance of the contract (Art. 6(1)(b) GDPR / FADP): data needed to provide the service.
- Legitimate interest (Art. 6(1)(f) GDPR / FADP): security, fraud prevention, service improvement.
- Legal obligation (Art. 6(1)(c) GDPR / FADP): retention of transport documents, customs and tax obligations.
- Consent (Art. 6(1)(a) GDPR / FADP): analytics cookies, optional marketing communications.
5. Data retention
- Active account data: for the full duration of the subscription + 12 months after termination.
- Transport documents and legal archives: 10 years (Swiss legal obligations, CO Art. 958f).
- Operational GPS data: rolling 18 months.
- Connection and security logs: 12 months.
- Billing data: 10 years (tax obligations).
After these periods, data is securely deleted or irreversibly anonymised.
6. Recipients and processors
Your data may be shared with:
- Other Users: strictly to the extent necessary to carry out a shipment (business contact details, delivery information).
- Technical processors: hosting (data centre in France, in the European Union), payment provider, transactional email service, audience measurement (Google Analytics, with your consent).
- Competent authorities: on a duly justified legal request (customs, tax and judicial authorities).
FretCom never sells your data to third parties. All processors are bound by data processing agreements that comply with the FADP and GDPR.
Transfers outside Switzerland/EU: where transfers to third countries are necessary, they are covered by approved standard contractual clauses or equivalent mechanisms ensuring an adequate level of protection.
7. Data security
FretCom implements appropriate technical and organisational measures to protect your data:
- TLS 1.3 encryption for all communications
- Data separated by company: each company sees only its own data
- Documents served through signed, time-limited links, never publicly accessible
- Automatic platform monitoring every 5 minutes
- Strict access control (principle of least privilege)
- Daily database backup, kept for 30 days, with copies off the server
In the event of a data breach likely to pose a risk to your rights, FretCom will notify the competent authorities within 72 hours and inform you as quickly as possible.
8. Your rights
Under the FADP and GDPR, you have the following rights:
- Right of access: obtain a copy of your data processed by FretCom.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data (subject to legal retention obligations).
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to certain processing based on legitimate interest.
- Right to restriction: request the temporary suspension of processing.
- Right to withdraw consent: at any time, without affecting earlier processing.
To exercise your rights, contact: info@fretcom.ch. FretCom undertakes to reply within 30 days.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the competent supervisory authority in your country of residence (EU).
9. Cookies
9.1 Strictly necessary cookies
These cookies are essential for the Platform to work (session, authentication, security). They cannot be disabled.
9.2 Analytics cookies
Used to measure audience and improve the user experience. These cookies are placed only with your explicit consent, collected on your first visit. You can withdraw your consent at any time using the cookie settings link at the bottom of the page.
9.3 No advertising cookies
FretCom does not use any cookies for advertising or commercial profiling on its own services.
10. Changes to this policy
FretCom may update this policy to reflect legal or technical developments. The date of the latest change appears at the top of this document. In the event of a substantial change, you will be informed by email 30 days in advance.
11. Contact
Data protection: info@fretcom.ch
FretCom, Lausanne, Switzerland